How verification works
The verifier accepts an OID4VP presentation (an SD-JWT-VC with a key-binding JWT) on POST /openid4vp/verify. It:
- Parses the SD-JWT and extracts the issuer DID
- Resolves the issuer’s public key via the bureau’s JWKS at
https://bureau.c5.trua.cloud/.well-known/jwks.json - Verifies the signature, the key-binding JWT, and the disclosure tuples
- Returns
{ valid: true, issuer, claims }on success or{ valid: false, reason }on failure
Verification is a function of standard OID4VP plus a small per-ATS adapter — not a bespoke per-employer project.